A Notice for Our Patients of a Recent Phishing Incident

Progressions Behavioral Health Services (“Progressions”) takes the privacy and security of the individuals we serve very seriously. Regrettably, this notice is to inform our patients of an incident that may have involved some of their information.

Some of our employees clicked on a phishing email, thinking the email was a legitimate request, and may have unknowingly allowed an unknown actor access to their email accounts. We began an investigation and, on April 24, 2018, learned that some of the affected emails contained sensitive information. Some patient information may have been included in the affected email boxes, including patients’ names, that they may have received services from Progressions, health insurance information and, in a limited number of cases, social security numbers.

We have no indication that any information has been used in any way, but in an abundance of caution, we began mailing letters to affected patients on June 22, 2018. For those patients whose social security number was affected, we are offering credit monitoring and identity protection services. As a general rule, we recommend our patients review the Explanation of Benefits they receive from their health insurer. If there are charges for services the patient did not authorize, please contact the health insurer immediately. If you believe you have been affected and do not receive a letter by July 16, 2018, please call 1-888-409-2905, Monday through Friday, 9:00 a.m. to 9:00 p.m., ET.

We deeply regret any concern or inconvenience this incident may have caused our patients. To help prevent something like this from happening in the future, we are reinforcing education with our staff on phishing emails.